3d87b636f86ef428d9c3c8af5ced9324_JaffaCakes118

General

Target

3d87b636f86ef428d9c3c8af5ced9324_JaffaCakes118
Size

394KB
MD5

3d87b636f86ef428d9c3c8af5ced9324
SHA1

b811ce98dc137e9e619724b000660327c2d22226
SHA256

eccd748f5e0b864348eecb6f2ce840dcf9e1df6665930a442af480ffc6ea4050
SHA512

2d3f6864f85e50b22213c96bcfc8837b478ae21bc6e457530496da13ddae90fcc315d1caff2f709be1a511dcdc628b3b789edcf338f4941debbfc30c2bad57dc
SSDEEP

6144:rEBD+j0mkQnLLoBbw1khHFEVuPjPvK/q1lDUx2RfiWE3sv27kwKcmRZCZSRRC:fjdPLLoUgF/KyHVDSIwiySRR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d87b636f86ef428d9c3c8af5ced9324_JaffaCakes118

Files

3d87b636f86ef428d9c3c8af5ced9324_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9652fba1cc0b540a9368a51df0a9965e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegisterServiceCtrlHandlerExA
GetTraceEnableFlags
EncryptFileW
OpenEncryptedFileRawA
AddAccessDeniedObjectAce
WmiSetSingleInstanceW
SetTokenInformation
SystemFunction031
EqualDomainSid

kernel32

FillConsoleOutputCharacterA
GetConsoleAliasesLengthA
ReadFileScatter
WaitCommEvent
GetConsoleCommandHistoryLengthW
SetVolumeMountPointW
UnlockFile
GetCommandLineA
EnterCriticalSection
lstrcpyA
GetStartupInfoA
GetModuleHandleA
VirtualProtect
CopyFileExW
GlobalMemoryStatusEx
GetConsoleAliasExesA
GetCompressedFileSizeW

gdi32

EnumMetaFile
ExtEscape
GetNearestPaletteIndex
CLIPOBJ_ppoGetPath
EngCreateClip

msvcrt

__toascii
perror
floor
_getpid
_wexecv
_getdiskfree
__p__iob
_toupper
_ismbcdigit
_memccpy

user32

GrayStringA
ClientToScreen
SetWindowRgn
SetSystemTimer
FreeDDElParam
SetTaskmanWindow
EqualRect
FlashWindowEx

Sections

.text
Size: 389KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9652fba1cc0b540a9368a51df0a9965e

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

msvcrt

user32

Sections

.text Size: 389KB - Virtual size: 389KB

.data Size: 3KB - Virtual size: 564KB

.rsrc Size: 1024B - Virtual size: 908B

.text
Size: 389KB - Virtual size: 389KB

.data
Size: 3KB - Virtual size: 564KB

.rsrc
Size: 1024B - Virtual size: 908B